Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/etPuE87UGxohENC637UKySF6G3I.roa
File: etPuE87UGxohENC637UKySF6G3I.roa (raw, json)
Hash identifier: iqAl+n4bDeQTKTNygJORp1WmpXvN+9zWp0vTXrQLExM=
Subject key identifier: 7A:D3:EE:13:CE:D4:1B:1A:21:10:D0:BA:DF:B5:0A:C9:21:7A:1B:72
Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial: 079B9AF1
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/etPuE87UGxohENC637UKySF6G3I.roa
Signing time: Sat 01 Jan 2022 16:10:34 +0000
ROA not before: Sat 01 Jan 2022 16:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15656
IP address blocks: 212.146.132.0/24 maxlen: 24
212.146.129.0/24 maxlen: 24
212.146.128.0/24 maxlen: 24
212.146.131.0/24 maxlen: 24
212.146.130.0/24 maxlen: 24
212.146.136.0/24 maxlen: 24
212.146.135.0/24 maxlen: 24
212.146.137.0/24 maxlen: 24
212.146.134.0/24 maxlen: 24
212.146.133.0/24 maxlen: 24
212.146.139.0/24 maxlen: 24
45.134.192.0/22 maxlen: 24
212.146.138.0/24 maxlen: 24
212.146.145.0/24 maxlen: 24
212.146.143.0/24 maxlen: 24
212.146.142.0/24 maxlen: 24
212.146.144.0/24 maxlen: 24
212.146.141.0/24 maxlen: 24
212.146.140.0/24 maxlen: 24
212.146.150.0/24 maxlen: 24
212.146.149.0/24 maxlen: 24
212.146.151.0/24 maxlen: 24
212.146.146.0/24 maxlen: 24
212.146.148.0/24 maxlen: 24
212.146.147.0/24 maxlen: 24
212.146.152.0/24 maxlen: 24
212.146.159.0/24 maxlen: 24
212.146.157.0/24 maxlen: 24
212.146.156.0/24 maxlen: 24
212.146.158.0/24 maxlen: 24
212.146.153.0/24 maxlen: 24
212.146.155.0/24 maxlen: 24
212.146.154.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127638257 (0x79b9af1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Validity
Not Before: Jan 1 16:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ad3ee13ced41b1a2110d0badfb50ac9217a1b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:be:ce:ba:fd:d4:4c:a7:12:eb:aa:76:5e:
0a:f4:58:6e:e1:1c:dc:4e:1c:ef:e3:3b:b8:7c:b2:
4b:5e:d0:17:ff:73:09:72:c8:48:fb:ca:19:bf:51:
0e:81:13:ed:a3:fd:00:71:90:98:e2:c1:f3:b5:45:
ec:6a:a8:84:e9:1f:29:56:2f:96:5d:a8:04:30:76:
df:35:d5:af:58:29:89:ce:3e:36:48:c4:09:4c:f8:
68:c2:10:66:71:16:e7:c6:d1:6f:81:d9:74:de:6a:
35:3d:90:df:b0:2b:c7:f6:7a:47:22:9e:c9:96:73:
ad:72:db:55:4f:f6:98:61:0b:56:a7:ae:8f:5f:aa:
84:d7:8c:da:9e:99:3c:06:d5:31:ea:a4:3a:5a:b6:
3f:4b:c8:77:ea:d1:4e:a6:4f:55:dc:b4:65:f5:b1:
72:65:54:c3:5c:c2:63:aa:d6:81:bb:f9:03:2f:9f:
1c:ea:fb:c5:c2:8b:44:d9:2f:e9:ae:b0:94:e2:41:
3e:d3:c0:fc:91:ae:ce:a7:43:b6:aa:25:6f:b8:23:
24:33:03:50:b7:15:43:59:ed:cc:26:57:30:69:2a:
cd:08:08:f6:9c:3e:f4:47:47:72:b7:76:60:1f:c7:
31:4a:b6:20:93:e0:56:ec:00:be:9b:15:f8:05:c1:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D3:EE:13:CE:D4:1B:1A:21:10:D0:BA:DF:B5:0A:C9:21:7A:1B:72
X509v3 Authority Key Identifier:
keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/etPuE87UGxohENC637UKySF6G3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.192.0/22
212.146.128.0/19
Signature Algorithm: sha256WithRSAEncryption
06:27:c6:32:f0:d5:93:df:ac:52:9c:c4:ff:c2:f7:56:cf:e5:
c0:ed:50:b1:8d:ff:bc:85:23:76:dd:8f:52:6f:fe:ae:ed:62:
01:7a:01:f6:14:79:be:2f:9b:e7:86:a4:62:9c:c5:5a:00:0b:
df:1a:b2:76:f8:74:5a:10:5b:c1:29:fb:68:36:d4:a1:7a:19:
ca:26:b4:65:a5:23:f4:a0:4e:42:2d:8a:af:24:c1:9a:bc:88:
b6:e8:f7:47:10:80:fb:a7:47:ef:e2:a9:eb:2a:cf:91:b2:a1:
a1:87:97:ee:27:21:4f:90:34:4e:9e:25:c2:0e:c5:70:23:bd:
43:64:84:c8:43:6d:d0:ec:09:2e:32:65:39:8e:3c:a8:12:e9:
3b:46:cd:f3:56:d2:d0:9e:c9:12:24:e1:76:b8:f6:ff:30:0b:
a4:0d:79:d9:7b:c9:8e:34:52:4c:7d:23:a2:c4:36:2c:5d:5f:
df:bb:60:ec:40:76:45:84:df:d6:47:d8:90:da:c6:89:ec:42:
2c:78:7b:4f:a2:34:57:a6:45:9d:92:31:38:b4:d9:2b:06:e3:
8e:62:a0:88:b9:4d:99:70:2d:ba:82:34:43:7b:4d:5d:ac:b7:
49:2e:5b:d2:79:28:d5:8c:7e:88:f1:45:1d:69:50:c0:8f:15:
8f:6f:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:04:17 2025 by rpki-client